Break IC, Recover MCU, Microcontroller Reverse Engineering

Archive for June, 2014

we can Attack IC ADUC831BSZ Firmware, please find below IC ADUC831BSZ features for your reference:

ANALOG I/O

FUNCTIONAL BLOCK DIAGRAM

8-Channel, 247 kSPS 12-Bit ADC

DC Performance: 1 LSB INL

 

ADuC831

12-BIT

DAC BUF DAC

AC Performance: 71 dB SNR

DMA Controller for High Speed ADC-to-RAM Capture

2 12-Bit (Monotonic) Voltage Output DACs

Dual Output PWM/ – DACs

On-Chip Temperature Sensor Function 3 C

 

ADC0

ADC1

MUX

T/H 12-BIT ADC 12-BIT DAC 16-BIT

– DAC BUF DAC

On-Chip Voltage Reference

ADC5

Memory

62 kBytes On-Chip Flash/EE Program Memory

4 kBytes On-Chip Flash/EE Data Memory

 

ADC6

ADC7

 

TEMP

HARDWARE

CALIBRATON

 

16-BIT

– DAC

16-BIT

PWM

 

MUX

PWM0

PWM1

 

Flash/EE, 100 Yr Retention, 100 kCycles Endurance

2304 Bytes On-Chip Data RAM

8051 Based Core

8051 Compatible Instruction Set (16 MHz Max) to Clone IC

12 Interrupt Sources, 2 Priority Levels

Dual Data Pointer

 

SENSOR

16-BIT

PWM 8051-BASED MCU WITH ADDITIONAL

PERIPHERALS

62 kBYTES FLASH/EE PROGRAM MEMORY

4 kBYTES FLASH/EE DATA MEMORY

2304 BYTES USER RAM

 

Extended 11-Bit Stack Pointer

 

3

 

16 BIT TIMERS

 

POWER SUPPLY MON

 

On-Chip Peripherals

Time Interval Counter (TIC)

UART, I2C®, and SPI® Serial I/O

Watchdog Timer (WDT), Power Supply Monitor (PSM)

 

INTERNAL

BAND GAP

VREF

VREF

 

OSC

XTAL1

XTAL2

 

1

 

REAL TIME CLOCK

PARALLEL

PORTS

 

WATCHDOG TIMER

UART, I2 C, AND SPI

SERIAL I/O

 

Power

 

Specified for 3 V and 5 V Operation

Normal, Idle, and Power-Down Modes

Power-Down: 20 A @ 3 V

APPLICATIONS

Optical Networking—Laser Power Control

Base Station Systems

Precision Instrumentation, Smart Sensors

Transient Capture Systems

DAS and Communications Systems

Pin compatible upgrade to existing ADuC812 systems

that require additional code or data memory. Runs

from 1 MHz–16 MHz to external crystal.

The ADuC832 is also available. Functionally is the same

as the ADuC831, except the ADuC832 runs from a 32 kHz

external crystal with on-chip PLL

We can Break Chip PIC16F720 Firmware, please view below Chip PIC16F720 features for your reference:

The PIC16F/LF720 and PIC16F/LF721 devices are programmed using In-Circuit Serial Programming™ (ICSP™). This programming specification applies to the PIC16F/LF720 and PIC16F/LF721 devices in all packages

With the exception of memory size and the voltage regulator, all other aspects of the PIC16F/LF720 and PIC16F/LF721 devices are identical.

Configuration Words

The PIC16F/LF720 and PIC16F/LF721 have two Configuration Words, Configuration Word 1 (2007h) and Configuration Word 2 (2008h). The individual bits within these Configuration Words are used to enable or disable device functions such as the Brown-out Reset, code protection to prevent MCU Reading and Power-up Timer.

Calibration Words

For the PIC16F/LF720 and PIC16F/LF721 devices, the 16 MHz internal oscillator (INTOSC) and the Brown-out Reset (BOR) are factory calibrated and stored in Calibration Words 1 and 2 (2009h and 200Ah). The Calibration Words do not participate in erase operations. The device can be erased without affecting the Calibration Words.